Forward looking to FC2 final and SELinux

Jesse Keating jkeating at j2solutions.net
Thu Apr 8 14:41:42 UTC 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 07 April 2004 23:46, Alexandre Oliva wrote:
> How would you feel about permissive mode instead of disabled as the
> default?

If permissive mode can be kept a bit quieter, especially during the bootup,
then perhaps.  Having 200+ avc messages spew through the graphical login
is going to cause some people to hit the panic button and call up their
tech support (me) in a panic.  Best to avoid such benign messages for
those that won't use SELinux in the first place.

IMHO, permissive mode is only for those that are planning on using SELinux
and want to test their rules.  Having it running for those that will never
use SELinux does not seem ideal.

- -- 
Jesse Keating RHCE	(http://geek.j2solutions.net)
Fedora Legacy Team	(http://www.fedoralegacy.org)
GPG Public Key		(http://geek.j2solutions.net/jkeating.j2solutions.pub)

Was I helpful?  Let others know:
 http://svcs.affero.net/rm.php?r=jkeating
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAdWSm4v2HLvE71NURAnBjAJ0YDe0mwM/aOMUW3+OYNgtn+dS0aACdG/fT
/AnIx++vSBpVwa6GU2TLnCk=
=o4Ae
-----END PGP SIGNATURE-----





More information about the fedora-devel-list mailing list